Privacy Policy

The controller responsible for processing your data is:

We are not required to appoint a data protection officer. For any privacy question or request, write to the address above.

Visiting the website. When you load any page, our hosting and security providers process your IP address, browser and device information, the page requested, and the time of the request. We need this to deliver the site, keep it secure and fend off abuse. Legal basis: our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR). Server logs are deleted after 30 days.

Your account. Email address and password (stored only as a hash), or, if you sign in with Google, the email address and name Google shares with us. Before sign-in and sign-up, Cloudflare Turnstile checks that you are not a bot, using technical signals from your browser. Legal basis: performance of our contract with you (Art. 6(1)(b)); for the bot check, our legitimate interest in preventing automated abuse (Art. 6(1)(f)).

Your traveler profile. Optional details you choose to give us: first and last name, profile photo, home city and its coordinates, travel style and interests, drinking and coffee style, dietary notes, and free-text notes. We use them only to personalize your recommendations, itineraries and packing lists. Dietary notes can reveal health or religious information; please only add what you are comfortable with. Where they do, we process them on the basis of your explicit consent (Art. 9(2)(a)), which you can withdraw at any time by deleting the notes. Otherwise, legal basis: Art. 6(1)(b).

Your trips. Destinations, dates, arrival and departure details, accommodation, the highlights you pick, itineraries, trip prep tasks, packing lists, notes and booking references you enter, cover photos, and the messages you type into the trip-planning chat. Legal basis: Art. 6(1)(b).

Emails. We send emails that are part of the service: account confirmation and password reset, your itinerary, trip prep reminders, and a notice before an inactive account is deleted. Reminder emails contain an unsubscribe link. Legal basis: Art. 6(1)(b). We do not send marketing emails.

Error monitoring. When something breaks, technical details about the error (such as the page, browser and request path) are sent to Sentry so we can fix it. We configure it not to send IP addresses, cookies or other personal identifiers. Legal basis: our legitimate interest in a reliable service (Art. 6(1)(f)).

Usage and cost records. For each AI request we record which feature was used, its timing and its cost, to keep the service affordable and to prevent abuse (including rate limits keyed to your account or, if signed out, your IP address). Legal basis: Art. 6(1)(f).

You need to provide an email address to create an account. Everything in your profile is optional; without it, recommendations are simply less personal.

Sorti uses AI models from Anthropic to generate and edit itineraries, packing lists, trip prep tasks and day titles, and to understand what you type in the trip-planning chat. For each request, Anthropic receives the trip details and the profile preferences relevant to that request and the text of your message, never your email address or password. To find the start time of an event you mention, the model may run a web search for the event; only the event details, never data about you, go into that search. Under its commercial terms, Anthropic does not use this data to train its models and keeps it only for a limited period.

AI output can be wrong. Always check opening hours, times, prices and booking requirements with the venue or provider. Sorti makes no decisions about you that have legal or similarly significant effects (Art. 22 GDPR).

We use the service providers below to run Sorti. They process personal data only on our instructions under data processing agreements (Art. 28 GDPR).

To build recommendations we also query places, events, weather and travel-advisory services (including Ticketmaster, Viator, OpenWeatherMap and the U.S. State Department). These requests contain only destinations, dates and search terms, never your name or contact details.

Bookings.When you follow a booking or ticket link, you leave Sorti and the provider's own privacy policy applies. Some links are affiliate links (see our Terms); the provider may learn that you came from Sorti.

Shared trips. If you create a share link or calendar feed for a trip, anyone with that link can see the itinerary until you revoke it. Personal notes and booking references are left out of public views.

We do not sell your personal data and do not share it for advertising. We disclose data to authorities only where the law requires us to.

Your account and trip data are stored in the EU. Some providers listed above are based in the USA or process data there. Where that happens, the transfer is covered by the EU-U.S. Data Privacy Framework for certified providers (Art. 45 GDPR) or by the European Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR). You can request a copy of the relevant safeguards from us.

Essential (always on): sign-in session cookies from our authentication provider, a cookie remembering your cookie choices, and a cookie recording which consent rules apply to your region. These are strictly necessary to provide the service you request (§ 25(2) no. 2 TDDDG; Art. 6(1)(b) and (f) GDPR).

Optional, only with your choice: (a) Analytics: Vercel Web Analytics counts page views without cookies or cross-site tracking; page addresses are sent without query strings, and private share and unsubscribe links are redacted. (b) Session replay: Sentry Session Replay records a replay of a session, with all text and form inputs masked and images blocked, only to diagnose bugs. Legal basis: your consent (§ 25(1) TDDDG; Art. 6(1)(a) GDPR).

If you are in the US, optional analytics are on by default and you can turn them off at any time. Everywhere else, they stay off unless you accept them. You can change or withdraw your choice at any time via "Cookie settings" in the site footer; withdrawal does not affect processing before it. Sorti treats a Global Privacy Control (GPC) signal as an opt-out of optional cookies. Browsers' "Do Not Track" setting has no agreed standard, so we do not act on it separately; use GPC or Cookie settings instead.

While your account is active, we keep your trips and trip history so you can revisit them. You can delete a trip, or your whole account, from your profile settings at any time; account deletion removes your profile, trips, photos and chat history.

• Inactive accounts: after 24 months with no sign-in or app activity, we delete your account and all associated trip data. We email you 30 days beforehand; signing in keeps your account.
• Trip-planning chat messages: deleted 12 months after the trip’s end date.
• Itinerary edit history (undo snapshots): deleted 90 days after the trip’s end date.
• Unconfirmed sign-ups: deleted 30 days after creation.
• AI usage and cost records: kept for accounting, unlinked from your account after 24 months.
• Server logs: 30 days.
• Database backups: overwritten on a rolling basis and deleted within 120 days.

Where the law requires longer retention (for example tax records), we keep only what it requires.

Under the GDPR you have the right to:

• access the data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data deleted (Art. 17);
• restrict processing (Art. 18);
• receive your data in a portable format (Art. 20);
• withdraw any consent at any time, with effect for the future (Art. 7(3));
• object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests (Art. 21);
• lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work (Art. 77).

You can export or delete your data yourself in your profile settings. For anything else, email privacy@sorti.travel. We answer within one month.

Sorti is not intended for anyone under 16, and we do not knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it.

Data is encrypted in transit (TLS) and at rest by our hosting providers. Access to production systems is limited to the people who operate Sorti. No system is perfectly secure; if a breach affects your data, we will inform you and the authorities as the law requires.

We update this policy when our processing changes. The date at the top shows the latest version. We will tell you about material changes by email or in the app before they take effect.